CVE-2009-4788

2010-04-2114:00:00

mitre

www.cve.org

pligg

open redirect

vulnerabilities

remote attackers

phishing attacks

http referer

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

69.6%

JSON

Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the (1) return parameter to pligg/login.php and the (2) HTTP Referer header to user_settings.php.